Tilesy.app Tilesy

Legal

Privacy Policy

Last updated: August 19, 2026

1. Who We Are

Tilesy ("we", "us", or "our") is a mobile photo bingo game for groups, available for iPhone and Android. This Privacy Policy explains how we collect, use, retain, and protect information when you use our website or mobile app.

If you have questions about this policy, contact us at [email protected].

2. Information We Collect

Website

When you visit the Tilesy website, we may collect basic technical and usage information needed to operate, secure, and improve the website, such as IP address, page visits, device type, browser type, referring page, approximate region, and interactions with page elements.

If analytics tools are enabled, we use them to understand aggregate website usage. We do not use website analytics for targeted advertising.

Web Gallery Access

When someone signs in to a password-protected game gallery, we process the IP address, game code, whether the sign-in succeeded, and a timestamp to prevent password guessing and abuse. These authentication-attempt records are normally removed within 48 hours. The gallery may also temporarily cache access state, photo labels, and photo references; cached photo references and labels are normally removed within 7 days after their last use and are not served after the gallery is disabled, scheduled for deletion, or expired.

Mobile App

The Tilesy mobile app may collect the following data:

App Usage Analytics

This data is used to understand which features are being used and to improve the app experience. Tilesy does not require a named user account, although analytics providers may use pseudonymous app- or device-level identifiers.

Crash Reports

Crash reports help us identify and fix bugs. They do not include your name, game photos, or game content.

Anonymous Player Identifier and Purchases

The app signs in to Firebase anonymously and stores the resulting pseudonymous player identifier on the device. We use it to identify game membership, restore an interrupted session, find recent games, and keep one player's data separate from another's. It is not a public profile and is not created from an email address or password. The same identifier is supplied to RevenueCat to check, purchase, and restore the Premium entitlement.

Game Data

When you play Tilesy, the following data is temporarily stored to run the game:

Server-side game-data retention: Game data for free games is automatically deleted 24 hours after the game ends. For Premium games, server-side game data is retained for 7 days so players can revisit results, then deleted. The host can request earlier deletion from the completed Results screen.

Tilesy does not require a named user account. Server-side game data is tied to a game code, display name, and pseudonymous player identifier rather than a public or email-based profile.

Data Stored on Your Device

The app stores limited data locally so its features continue to work:

A saved custom list stays on that device until you delete it or clear the app's data. Its prompts are uploaded only when you use the list to create a game. Recent-game summaries may remain in the local cache after the server copy expires until the app next refreshes that cache or its local data is cleared. Queued photo files are kept temporarily for upload and removed after successful processing, expiry, or cleanup.

3. How We Use Your Information

We do not sell your data. We do not use your data for targeted advertising.

4. Photos and Game Content

Photos submitted during a game are visible to players in that game through the game board, results, and gallery features. Every player can save or share their own photos from the app. Premium also allows a player to save or share photos taken by other players.

Tilesy does not automatically verify whether a submitted photo matches its prompt and does not provide a host-approval queue. Players and hosts are responsible for deciding whether submitted photos fit the game.

Web Gallery

The host of a Premium game can turn on an optional web gallery for that game. When enabled, the game's photos can be viewed and downloaded individually or as a ZIP at tilesy.app/gallery/ by people who enter the game code and separate gallery password the host shares. Gallery visitors do not need Premium. The web gallery is off by default, the host controls it and can turn it off at any time, and access ends when the host schedules game deletion or when the retention window ends. Gallery photos are never listed publicly or indexed by search engines. Anyone who receives both credentials may be able to access the gallery, so the host and players should share them carefully.

Early Deletion

The host can request deletion of a completed game from its Results screen. This disables web gallery access immediately and schedules the game's server-side photos and results for permanent deletion for every player. Because this affects the whole group, other players cannot reverse the host's request.

6. Third-Party Services

Tilesy may use third-party services, each with its own privacy practices:

Data may be processed on servers outside your country of residence.

7. Data Transfers

We may use cloud infrastructure that stores or processes data in the United States, the European Union, or other countries where our service providers operate. By using Tilesy, you acknowledge that your data may be transferred and processed in those locations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Because Tilesy does not require named accounts, most game data is tied to a game code, display name, and pseudonymous player identifier. A host can request early deletion of a completed game in the app. For other requests, or if you believe we hold identifiable data about you, contact us at [email protected] and include the game code when relevant.

9. Children's Privacy

Tilesy is designed for general audiences and may be used by children under parental, guardian, teacher, or organiser supervision. We do not knowingly collect personal information from children under the age of 13, or under 16 in the European Economic Area.

If you believe a child has submitted identifiable information through the app, contact us and we will take appropriate steps to remove it.

10. Data Security

We take reasonable precautions to protect the data we hold, including using service providers that support encryption in transit and access controls. No system can be guaranteed 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Tilesy after changes are posted constitutes acceptance of the revised policy.

12. Contact

For questions, requests, or concerns regarding this Privacy Policy, contact us at:

[email protected]